Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
File:                     iSKxgxmji3UEi7etiaeLo303RcY.mft (raw, json)
Hash identifier:          9Bcm1Ji/SvVWfYH+Cz9GCQuZuI3ihDq+mjfNyk6BLdc=
Subject key identifier:   38:94:1B:13:CF:73:47:76:5B:9F:5B:C5:16:18:41:E7:96:F4:B3:F1
Authority key identifier: 89:22:B1:83:19:A3:8B:75:04:8B:B7:AD:89:A7:8B:A3:7D:37:45:C6
Certificate issuer:       /CN=8922b18319a38b75048bb7ad89a78ba37d3745c6
Certificate serial:       019F9F5EE1C6992AAA68EFE42D2B45A406E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
Manifest number:          01CE
Signing time:             Sun 26 Jul 2026 17:00:23 +0000
Manifest this update:     Sun 26 Jul 2026 17:00:23 +0000
Manifest next update:     Mon 27 Jul 2026 17:00:23 +0000
Files and hashes:         1: UTmSNHW_h1OEtIHiOMz9m7RdXcQ.asa (hash: 2JMO3R8vQ9ztrTHPM06LK7EXviAp0gW+oBxKpsmJcSY=)
                          2: iSKxgxmji3UEi7etiaeLo303RcY.crl (hash: WsCceMxBdxnzldTI1qupAfYwWvRketL6z3DaaseCRks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 17:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:5e:e1:c6:99:2a:aa:68:ef:e4:2d:2b:45:a4:06:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8922b18319a38b75048bb7ad89a78ba37d3745c6
        Validity
            Not Before: Jul 26 17:00:23 2026 GMT
            Not After : Jul 27 17:00:23 2026 GMT
        Subject: CN=38941b13cf7347765b9f5bc5161841e796f4b3f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:24:07:cf:f3:46:ce:99:37:15:f2:96:35:05:
                    5d:d3:41:a3:cc:b3:b1:ee:79:a9:1f:24:13:e3:b5:
                    c2:d1:e9:d5:78:2e:c2:b7:93:5a:aa:a1:f0:f6:80:
                    ae:31:67:d8:0e:31:95:f4:5e:48:7e:1a:e4:c9:19:
                    6b:86:12:04:aa:3f:61:db:ce:17:ea:83:3d:1a:2d:
                    ae:f1:fa:43:cb:c8:7b:8f:37:01:f6:9b:9b:6f:31:
                    0d:b2:f9:4e:25:dd:d3:80:70:06:5c:44:17:2a:e6:
                    ca:b3:46:49:02:6a:36:4f:21:6d:54:c2:bb:00:b2:
                    a6:9c:ea:45:62:fa:f2:f4:6f:13:f3:e0:9d:3b:c3:
                    31:76:20:99:7c:53:d3:bb:c2:15:35:6d:ce:64:9c:
                    da:db:23:af:15:5d:a9:a1:f2:0a:b9:f6:e1:ff:b3:
                    dc:52:16:5d:ce:07:65:d0:91:d2:7d:d6:aa:aa:58:
                    43:d2:e6:5c:5e:fb:3d:7e:7c:97:b9:1d:e9:29:d2:
                    95:7f:cf:15:a1:19:97:f3:a7:10:21:1f:2c:1d:8c:
                    cb:15:a3:c8:00:d1:80:f9:0f:7a:b0:ab:68:12:63:
                    f6:1f:e2:a5:4b:31:db:cb:36:a4:23:27:fa:bf:18:
                    5c:2c:1b:37:70:a4:88:a6:e7:16:76:47:31:d0:ab:
                    3b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:94:1B:13:CF:73:47:76:5B:9F:5B:C5:16:18:41:E7:96:F4:B3:F1
            X509v3 Authority Key Identifier:
                keyid:89:22:B1:83:19:A3:8B:75:04:8B:B7:AD:89:A7:8B:A3:7D:37:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:d0:c6:48:19:38:1f:a1:96:37:d9:72:7e:a5:cd:73:e0:f5:
         4e:94:fa:19:4f:7a:9d:05:06:fa:26:f5:82:25:27:4f:24:f1:
         2f:08:c5:61:32:1d:09:31:e0:4a:51:19:62:b7:c9:16:0d:8c:
         0a:24:67:23:a2:8a:2e:75:bd:56:fe:ef:aa:ca:5f:f1:b2:00:
         6f:15:f8:d3:5f:a5:5a:1e:9e:3f:59:c2:3a:d4:ae:c8:6e:f8:
         1d:c1:15:dc:2c:78:9a:7c:49:15:53:5c:e7:88:12:54:73:f0:
         fb:e0:f1:ac:5f:ec:08:57:7e:ae:a5:93:28:67:da:a0:e2:f6:
         b0:c6:d3:49:1b:92:b5:5b:a0:cd:d2:64:47:ab:17:06:4f:3c:
         d4:47:d1:3f:c0:77:c8:53:c3:8b:a1:b5:39:69:6b:46:68:83:
         61:b2:e4:e1:87:1a:00:84:4e:c2:42:c2:d8:69:19:ac:6d:00:
         c0:d5:99:4b:0e:fd:94:d6:91:47:da:8e:1e:7d:e1:45:32:6e:
         de:37:05:f6:83:63:19:3a:5e:34:50:0e:84:43:2e:fd:31:6c:
         03:87:55:b7:24:ae:72:49:a2:a6:5c:d6:2f:0f:c9:6e:c7:dd:
         78:dc:01:de:70:75:5c:da:d2:70:58:f4:f4:cb:8f:d3:51:5c:
         c5:51:99:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:02:48 2026 by rpki-client